$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa File: 08948b09-6fc1-344a-9112-728d8ee52b11.roa (raw, json) Hash identifier: aKLRX9PmYyGQ7yjLwHGke/Z/rjaTZphw055rrJ0zDik= Subject key identifier: 0B:01:26:F7:48:67:F4:39:BC:59:2A:DD:82:98:1B:FB:96:AD:E9:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE4793B867894C0CAD480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396589 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e4:79:3b:86:78:94:c0:ca:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=88d6ccc1-f232-4987-a3de-e24de3da8461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:44:26:2a:88:8c:f0:0e:20:cc:a3:50:62: 32:44:9e:97:a6:5b:50:d3:91:6c:c7:51:f9:0f:da: be:2a:83:ea:25:bd:b9:c6:cb:e0:15:62:66:09:e4: a0:ea:e4:7a:21:d2:40:87:38:e5:cf:0b:67:0b:69: 1d:19:81:6e:2c:f3:2c:16:88:b0:18:30:c5:32:d2: 0b:42:70:12:3c:b1:62:29:b7:bc:ad:b2:bd:71:73: b4:8f:d3:24:6c:04:17:3b:15:68:5b:2b:2e:82:ac: 0a:95:b7:17:92:dd:7a:36:ef:fe:66:d5:51:bd:44: 81:6c:d9:c8:72:7b:aa:82:f0:5f:dc:a6:37:d2:64: 45:77:fb:69:d5:21:98:20:2f:f6:e0:a2:42:d6:73: d7:ac:d1:98:52:57:59:37:2e:6f:f2:c0:f2:71:7c: 23:e2:00:d6:d8:a1:65:dd:2a:2a:7a:77:33:43:9e: 03:e5:d8:5f:86:c2:3d:10:70:85:ea:ab:eb:fb:ad: 11:9d:c5:b1:b5:3b:31:ae:9a:f6:40:52:e8:09:2a: ff:63:17:c3:f9:60:4c:5c:37:c5:61:29:9f:34:29: 00:40:10:af:45:cd:71:f8:c6:1c:ed:c9:8e:59:2a: 94:48:8d:18:7d:74:90:51:e3:7d:68:c7:39:7f:20: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:26:F7:48:67:F4:39:BC:59:2A:DD:82:98:1B:FB:96:AD:E9:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:40:51:e1:9a:7c:29:05:3d:33:83:7d:02:47:93:50:4c:55: ae:2b:6e:69:18:fb:8d:66:f2:80:c6:5c:2e:c1:3b:8d:33:b4: 5b:89:01:24:29:31:fd:1c:1a:a3:7a:0b:2d:e0:ac:8d:0f:e6: eb:f2:3f:fe:76:e3:e5:a2:ff:ce:40:36:8b:a9:9b:0d:9b:e8: ee:b3:37:87:49:2a:e9:0b:11:b5:57:1e:22:ba:41:ec:e7:e1: d3:06:58:af:74:cf:5c:b7:a0:a4:8d:f5:e8:5b:0f:f3:47:0b: 37:ee:b7:a5:7b:b5:b1:8b:fd:79:81:8a:c9:5b:4c:75:c5:fd: 5a:f0:da:4e:ef:c0:09:ca:c8:4a:b6:1e:a1:ae:4b:10:30:ca: 99:32:ef:e7:f3:1b:1d:08:42:3b:ad:12:99:86:3b:ab:f5:51: 6f:73:31:4d:c9:23:e8:a5:29:fc:45:bb:16:2e:8a:87:e6:8b: 99:3b:84:7b:94:81:5c:4b:34:dc:a7:25:d5:ce:b7:55:74:ea: 51:4a:e4:33:fe:8c:45:5a:37:62:75:e1:39:d3:14:cd:55:0c: f2:33:e1:24:26:f4:fa:ab:90:75:ab:c9:99:8d:ba:0b:e0:6d: f5:5d:5a:08:f3:ca:fb:a9:b8:18:ba:db:71:96:ae:66:ef:e6: a7:74:86:5b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+R5O4Z4lMDK1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODhkNmNjYzEtZjIzMi00OTg3LWEzZGUtZTI0ZGUzZGE4NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllFEJiqIjPAOIMyjUGIyRJ6XpltQ05Fsx1H5 D9q+KoPqJb25xsvgFWJmCeSg6uR6IdJAhzjlzwtnC2kdGYFuLPMsFoiwGDDFMtIL QnASPLFiKbe8rbK9cXO0j9MkbAQXOxVoWysugqwKlbcXkt16Nu/+ZtVRvUSBbNnI cnuqgvBf3KY30mRFd/tp1SGYIC/24KJC1nPXrNGYUldZNy5v8sDycXwj4gDW2KFl 3SoqenczQ54D5dhfhsI9EHCF6qvr+60RncWxtTsxrpr2QFLoCSr/YxfD+WBMXDfF YSmfNCkAQBCvRc1x+MYc7cmOWSqUSI0YfXSQUeN9aMc5fyA/NQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAsBJvdIZ/Q5vFkq3YKYG/uWreloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg5NDhiMDktNmZjMS0z NDRhLTkxMTItNzI4ZDhlZTUyYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARQFHhmnwpBT0zg30CR5NQTFWuK25pGPuNZvKA xlwuwTuNM7RbiQEkKTH9HBqjegst4KyND+br8j/+duPlov/OQDaLqZsNm+juszeH SSrpCxG1Vx4iukHs5+HTBlivdM9ct6CkjfXoWw/zRws37rele7Wxi/15gYrJW0x1 xf1a8NpO78AJyshKth6hrksQMMqZMu/n8xsdCEI7rRKZhjur9VFvczFNySPopSn8 RbsWLoqH5ouZO4R7lIFcSzTcpyXVzrdVdOpRSuQz/oxFWjdideE50xTNVQzyM+Ek JvT6q5B1q8mZjboL4G31XVoI88r7qbgYuttxlq5m7+andIZb -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:17 2025 by rpki-client